Security Advisory
CVE-2018-20463
7.5
HIGH
Vulnerability Description
An issue was discovered in the JSmol2WP plugin 1.07 for WordPress. There is an arbitrary file read vulnerability via ../ directory traversal in query=php://filter/resource= in the jsmol.php query string. This can also be used for SSRF.
Published Date
December 25, 2018
Official Source
NIST NVD Advisory